Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/12/19 2:09 p.m.•20 views

CVE-2025-63950

An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b 2023-02-28. The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize function without validation...

7.5CVSS7.2AI score0.00531EPSS
SaveExploits1References1
OSV
OSV
•added 2025/12/18 9:15 p.m.•16 views

CVE-2025-63950

An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b 2023-02-28. The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize function without validation...

7.5CVSS5.9AI score0.00531EPSS
SaveExploits1References2
NVD
NVD
•added 2025/12/18 9:15 p.m.•28 views

CVE-2025-63950

An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b 2023-02-28. The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize function without validation...

7.5CVSS0.00531EPSS
SaveExploits1References2
CVE
CVE
•added 2025/12/18 12:00 a.m.•36 views

CVE-2025-63950

The to3k Twittodon application is vulnerable to an insecure deserialization flaw in its download.php script through commit b1c58a7d1dc664b38deb486ca290779621342c0b (2023-02-28). The obj parameter accepts base64-encoded data and passes it directly to the unserialize() function without validation. ...

7.5CVSS6AI score0.00531EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•6 views

CVE-2025-63950: Deserialization of Untrusted Data

An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b 2023-02-28. The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize function without validation...

7.5CVSS6AI score0.00531EPSS
SaveExploits1References1
Rows per page
Query Builder